TI-2019-14527 CVE-2019-20149 · GHSA-6c8f-qphg-qjgpctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain…Priority LOW 37ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'constructor': {'name':'Symbol'}.CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.02342 · Published 2019-12-30 · Partial fix · 6.0.3 CWE-668
